Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5L-yGfU5sA8Ni7dD7_A_qxhAHUc.roa
File: 5L-yGfU5sA8Ni7dD7_A_qxhAHUc.roa (raw, json)
Hash identifier: +AnzFMGylrZYS3Vw5fMAD05Wp+7+DIJdHKNYspq0xSc=
Subject key identifier: E4:BF:B2:19:F5:39:B0:0F:0D:8B:B7:43:EF:F0:3F:AB:18:40:1D:47
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019D29681301269B26D33D908826EF29785C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5L-yGfU5sA8Ni7dD7_A_qxhAHUc.roa
Signing time: Thu 26 Mar 2026 09:09:39 +0000
ROA not before: Thu 26 Mar 2026 09:09:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8447
IP address blocks: 79.132.66.0/24 maxlen: 24
79.132.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:68:13:01:26:9b:26:d3:3d:90:88:26:ef:29:78:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 26 09:09:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4bfb219f539b00f0d8bb743eff03fab18401d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:45:b0:d2:46:85:b9:69:e6:3c:3f:6c:db:2a:
62:1c:e0:50:c7:bd:82:6e:79:88:b9:eb:5b:74:3a:
89:0c:31:80:45:87:06:63:e9:4b:fc:5d:f6:b6:08:
87:a7:08:0c:7d:92:0c:18:1e:dd:6c:42:94:c0:f4:
20:3a:98:22:fa:60:89:90:da:39:09:95:ee:f2:c4:
a4:1c:75:a2:28:a6:01:dc:fd:90:77:a7:7f:b5:75:
ef:5c:76:2c:73:4f:98:c3:49:5a:85:7d:e9:da:a4:
e8:58:07:61:b5:47:11:d1:bf:a8:35:65:5c:5b:cb:
a2:a5:50:67:02:e1:e6:2b:d0:fa:b9:ab:57:bb:e7:
46:bc:fd:c2:15:b7:25:a3:a0:28:d8:0d:46:c5:72:
cd:9b:39:66:fc:0a:8b:ab:6e:37:7b:5b:df:10:a4:
2e:97:21:ca:5e:fe:4b:40:eb:23:bd:b7:fb:c4:40:
29:cd:ca:61:21:80:9c:1c:f5:4f:ee:b2:cb:14:f4:
49:85:5b:7f:d8:83:26:13:8e:f9:a1:72:36:f8:ec:
84:5b:48:c7:ab:77:38:84:d3:a3:05:67:c4:0c:18:
b1:a3:c7:ea:08:24:f4:5c:67:59:c4:95:95:43:52:
b9:f0:71:94:fd:09:b9:be:5f:6c:e3:ce:23:79:ee:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BF:B2:19:F5:39:B0:0F:0D:8B:B7:43:EF:F0:3F:AB:18:40:1D:47
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5L-yGfU5sA8Ni7dD7_A_qxhAHUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.66.0/23
Signature Algorithm: sha256WithRSAEncryption
95:5e:52:0e:d6:f3:6e:19:b9:87:9c:48:10:7a:28:76:28:07:
48:93:85:37:85:15:21:9c:35:26:a0:28:5a:41:70:e5:12:af:
b4:08:70:d9:af:e6:71:20:a2:fb:9b:1c:f8:0d:17:ed:1c:a4:
0c:f6:ef:2a:64:78:dd:06:0a:bc:89:f2:5d:7a:38:c5:21:44:
c1:b7:1b:2d:59:65:bf:9b:68:71:85:f5:70:87:a2:1a:4f:88:
a2:44:56:05:2b:71:bb:34:cf:e0:94:fb:b7:72:ae:ce:f0:54:
d4:b2:78:c2:d0:96:26:ee:2b:27:f1:29:61:98:e9:44:c2:fa:
81:ae:2c:66:8f:06:bf:26:2d:a8:49:c0:42:3f:8a:9b:c3:21:
f8:d0:6e:d7:e8:13:77:c4:a8:46:a8:6a:b5:49:48:5e:e6:c1:
ef:46:dd:a6:8f:36:0b:30:03:6c:4b:46:c8:8c:b1:f6:96:a8:
ef:6b:40:9b:1f:61:50:60:6a:8d:8a:06:25:08:ee:7c:8a:9e:
f8:ed:da:d3:28:22:d8:0f:08:c7:14:a5:1c:5c:90:c1:aa:48:
c4:a8:ff:56:ff:7a:0b:08:1b:48:47:52:e5:88:20:ef:69:c8:
3d:5a:20:2a:e7:72:f0:3b:8c:e4:dc:d3:62:84:66:6c:08:c9:
6e:32:0e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:24:59 2026 by rpki-client